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V 

REMARKS 

Claims 1-37 remain active in this application. 
Claims 1, 17 and 2 8 have been amended in the response 
filed December 20, 2004, entry of which has been 
requested in the concurrently filed Request for 
Continued Examination. No further amendment is made in 
this supplemental response. No new matter has been 
introduced into the application. 

It is noted with appreciation that the Advisory 
Action mailed January 21, 2005, indicated that the 
ground of rejection under 35 U.S.C. §112, first 
paragraph, has been withdrawn. It is also noted with 
appreciation that the rejection under 35 U.S.C. §102 as 
being anticipated by Ahlberg et al . has been withdrawn 
in regard to claims 13, 14, 21, 34 and 3 5 and the 
subject matter of those claims indicated to be 
allowable subject to the claims being rewritten in 
independent form. The Advisory Action also refers to 
Figures 10, 14, 15 and 23 in addition to Figure 20 in 
support of the rejection which has been maintained as 
to all other claims. 

In response, those Figures and the descriptions 
thereof at column 22, line 57 to column 23, line 48, 
column 26, line 64, to column 27, line 20, column 27, 
lines 29 - 63 and column 18, lines 7-48, 
respectively, have been carefully considered and it is 
respectfully submitted that, whatever the Examiner 
intended to convey by the comments in the Advisory 
Action, all of these passages are completely silent in 
regard to the hierarchy of lists and their respective 
contents which are explicitly recited in all 
independent claims and which support the meritorious 
functions of the invention as pointed out in detail in 
each response filed in this application to date. 

Specifically, each independent claim in the 
application recites 1.) a list of resources (e.g. 
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Figure 15) to which users may have access, if 
authorized, 2.) a list of access profiles (e.g. Figure 
14) wherein each access profile contains at least one 
of the resources contained in the list of resources and 
which will generally be groups of resources, and 3.) a 
list of users (e.g. Figure 13) which includes, for each 
user, a security profile by which each user can be 
authenticated to the system and one or more access 
profiles contained in the list of access profiles. In 
other words, the invention provides a list of access 
profiles logically interposed between the list of users 
with its security profiles for respective users and the 
list of resources available through the system. This 
logical architecture and hierarchy of lists illustrated 
in Figure lA, by providing an intermediate level list 
of access profiles (indicated by reference numeral 14 
in Figure lA) avoids the necessity of providing any 
reference to users in the list of resources (or the 
resources themselves) or in the list of access profiles 
or any reference to individual resources, per- se, in 
the list of users which supports automatic updating of 
the lists and access authorizations from simple editing 
of either the list of resources or the list of users 
when either resources or users are added, deleted or 
substituted, provides convenience in adding or deleting 
authorizations or modification of a security profile 
for a given existing user (some features of which the 
Examiner has now found to be allowable) and single 
operation authentication of a user for all of the 
resources to which the user is provided with authorized 
access, including, as a perfecting feature of the 
invention, provision for resolution of the type (e.g. 
read only, read and write) of authorization granted for 
each resource . 

This feature of the invention is recited in the 
independent claims as follows (emphasis added) : 
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Claims 1 and 28: 

^'editing a list of resources , 
^'editing a list of access profiles, each 
said access profile in said list of access 
profiles containing a designation of at least 
one of said resources listed in said list of 
resources, and 

"'editing a list of users to add or 
delete, for a user of said list of users, an 
access profile designation for an access 
profile containing said designation of said 
at least one said resource, said list of 
users including, for each listed user, a 
security profile including a userlD by which 
the user can be authenticated for one or more 
access profiles." 



Claim 17: 

"...said means for controlling access to said 
resources including a list of said resources , 
a list of access profiles , each access 
profile in said list of access profiles 
corresponding to at least one said resource 
listed in said list of resources, and a list 
of users containing security profile 
information tor authenticating a user and at 
least one access profile information 
associated with each said user, said at least 
one access profile corresponding to said at 
least one resource whereby said security 
profile authenticates a user to said at least 
one resource specified in a said access 
profile information in said security profile 
for said user. . 



While Ahlberg et al . contains references to numerous 
"profiles" , no teaching (or suggestion) of any such 
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hierarchy of lists and the relationship of their 
respective contents is seen and the Figures now noted 
by the Examiner and the passages of Ahlberg et al . 
descriptive thereof appear to be devoid of any 
reference to such subject matter or anything of 
relevance thereto. Moreover, the passage descriptive 
of Figure 20 at column 16, lines 33-65, appears to 
indicate that particular applications (e.g. resources) 
are directly associated with users and their security 
profiles in the user profiles of Ahlberg et al . ; 
directly contrary to the hierarchy of lists and the 
relationship of their contents recited in the claims 
(e.g. an list of profiles interposed between a list of 
users and a list of resources for associating users 
with resources would serve no useful purpose if that 
association is made directly in user profiles which 
would also preclude development of the advantages of 
the invention in facilitating changes of authorizations 
and authentication information provided by the 
invention) . Accordingly, these further references to 
Ahlberg et al . do not mitigate the Examiner's failure 
to make a prima facie demonstration of anticipation (or 
obviousness of any claim while these features support 
many meritorious effects of the invention not realized 
by Ahlberg et al . Accordingly, it is respectfully 
submitted that the rejection of claims 1-12, 15-20, 
2 2 - 3 3 and 3 6 - 3 7 remains in error and untenable and 
should be withdrawn in regard to these claims as it has 
been in regard to claims 13, 14, 21, 34 and 3 5 and such 
action is respectfully requested. 

Since all rejections, objections and requirements 
contained in the outstanding official action have been 
fully answered and shown to be in error and/ or 
inapplicable to the present claims, it is respectfully 
submitted that reconsideration is now in order under 
the provisions of 37 C.F.R. §1.111 (b) and such 
reconsideration is respectfully requested. Upon 
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reconsideration, it is also respectfully submitted that 
this application is in condition for allowance and such 
action is therefore respectfully requested. 

A petition for a one-month extension of time has 
been made above. If any further extension of time is 
required for this response to be considered as being 
timely filed, a conditional petition is hereby made for 
such extension of time. Please charge any deficiencies 
in fees and credit any overpayment of fees to Deposit 
Account No. 09-0458 of International Business Machines 
Corporation (E. Fishkill) . 



Whitham, Curtis Sc Christof f erson, P. C. 
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Reston, Virginia 20190 
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Customer Number: 3 0743 



Respectfully submitted, 



Marshall M. Curtis 
Reg. No. 33, 138 



